Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/9a5d4d-162a-4c09-a47a-92b5e25d247b/1/HcrJnnyhXQyZBCDuMW2aq4TMhH8.mft
File: HcrJnnyhXQyZBCDuMW2aq4TMhH8.mft (raw, json)
Hash identifier: hY7V3iY9sJt0yJH74n9Pt08RQzYrPj2Z276B3IB/PVw=
Subject key identifier: 1E:FA:E4:95:36:F5:69:FF:C4:EE:AA:E3:8C:F0:4E:FE:D8:8F:AE:FA
Authority key identifier: 1D:CA:C9:9E:7C:A1:5D:0C:99:04:20:EE:31:6D:9A:AB:84:CC:84:7F
Certificate issuer: /CN=1dcac99e7ca15d0c990420ee316d9aab84cc847f
Certificate serial: 0199FF593B12693AB50F0B3C9B36B15001B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HcrJnnyhXQyZBCDuMW2aq4TMhH8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/9a5d4d-162a-4c09-a47a-92b5e25d247b/1/HcrJnnyhXQyZBCDuMW2aq4TMhH8.mft
Manifest number: 1424
Signing time: Mon 20 Oct 2025 02:01:01 +0000
Manifest this update: Mon 20 Oct 2025 02:01:01 +0000
Manifest next update: Tue 21 Oct 2025 02:01:01 +0000
Files and hashes: 1: HcrJnnyhXQyZBCDuMW2aq4TMhH8.crl (hash: EZGmWVnnfN/qnsbLDkgpDNKGJrMLmiCPKnRFYqD9Mew=)
2: aW4RufV84k31ipqteYJMKE-MWns.roa (hash: TaIvFNKhSLJsRmqi1+QKHEIHNXDSbVD+wo6DE/PVLR4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/9a5d4d-162a-4c09-a47a-92b5e25d247b/1/HcrJnnyhXQyZBCDuMW2aq4TMhH8.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/9a5d4d-162a-4c09-a47a-92b5e25d247b/1/HcrJnnyhXQyZBCDuMW2aq4TMhH8.mft
rsync://rpki.ripe.net/repository/DEFAULT/HcrJnnyhXQyZBCDuMW2aq4TMhH8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:59:3b:12:69:3a:b5:0f:0b:3c:9b:36:b1:50:01:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1dcac99e7ca15d0c990420ee316d9aab84cc847f
Validity
Not Before: Oct 20 02:01:01 2025 GMT
Not After : Oct 21 02:01:01 2025 GMT
Subject: CN=1efae49536f569ffc4eeaae38cf04efed88faefa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:c2:e0:82:60:68:c1:d5:a4:ff:e3:b6:94:df:
40:4e:18:c2:c4:9d:0d:8d:10:39:9d:85:b6:ca:37:
b2:1b:92:b2:67:76:a3:43:09:4c:19:f1:f8:2c:0a:
ab:45:2e:52:28:18:0a:58:c0:b9:a1:1f:5f:88:8d:
ed:df:24:5b:cc:ce:c3:a3:18:60:08:6f:b7:e7:a2:
36:76:3b:fd:99:fb:7e:bf:f2:96:73:af:c6:be:81:
33:f4:22:8a:9e:3a:73:63:99:1d:72:9a:99:9b:68:
28:a1:1c:a2:92:b3:ec:71:7c:27:f1:f8:7d:0f:0c:
c8:a5:8a:03:72:6c:4d:b3:54:8e:12:7e:8b:50:cd:
cc:86:73:62:bc:e2:2c:ff:c6:cc:1d:72:4f:7e:4d:
5d:1d:8d:a8:c5:40:a4:28:ff:6f:e7:97:fc:8f:80:
4f:28:a3:1e:f9:d3:c8:7b:a8:2d:91:92:ae:56:8e:
1d:fb:dd:8c:36:15:fb:f2:3a:6d:28:90:79:11:63:
df:e8:40:de:9f:d5:8c:69:7d:ad:58:3b:54:3b:75:
5f:a7:09:f7:2f:fa:d2:25:cd:73:75:26:ec:bf:d9:
7e:e5:8d:e2:b5:22:60:fe:a2:e7:61:eb:ea:f7:03:
84:10:74:f7:c7:b4:82:fc:01:d7:75:97:9f:17:dd:
d6:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:FA:E4:95:36:F5:69:FF:C4:EE:AA:E3:8C:F0:4E:FE:D8:8F:AE:FA
X509v3 Authority Key Identifier:
keyid:1D:CA:C9:9E:7C:A1:5D:0C:99:04:20:EE:31:6D:9A:AB:84:CC:84:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HcrJnnyhXQyZBCDuMW2aq4TMhH8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/9a5d4d-162a-4c09-a47a-92b5e25d247b/1/HcrJnnyhXQyZBCDuMW2aq4TMhH8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/9a5d4d-162a-4c09-a47a-92b5e25d247b/1/HcrJnnyhXQyZBCDuMW2aq4TMhH8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:85:d3:cf:a8:8d:ef:d4:9b:94:e6:95:76:d0:e6:6e:38:44:
2c:ff:6f:42:04:07:5e:a0:75:8a:de:d9:bb:8f:da:37:22:c0:
c7:d2:97:e4:59:e4:85:0b:7c:c8:da:d0:78:8c:85:9c:c7:60:
d8:69:1a:5a:07:7e:6b:ab:99:d7:d5:3c:36:c3:89:1b:73:af:
04:2b:e7:89:d9:00:73:d0:1f:34:9e:3c:5a:66:a5:22:34:d3:
d8:26:4e:1f:40:82:f1:91:0b:2f:04:3e:e0:e3:04:d2:58:4a:
8f:55:63:13:0d:b5:6e:f5:c9:16:74:4a:fe:59:41:f8:46:8d:
d1:ac:f6:c1:cc:38:d9:06:23:c4:94:42:6a:c9:48:65:6f:85:
b0:46:29:e8:48:ae:7b:79:0c:a6:c8:8f:28:20:e1:a1:c4:c5:
fa:dc:a8:e6:28:d2:90:08:bb:31:e2:08:fe:ff:86:42:eb:85:
f7:50:87:fa:83:e0:a4:ce:5c:ed:f1:28:13:09:3f:3f:ba:21:
7b:dd:1b:f8:15:ad:ae:3e:e9:94:0a:f5:c9:d4:63:39:94:8b:
bf:7c:db:a2:a1:51:ae:c8:d7:b3:3c:12:ab:29:c9:aa:41:21:
1d:44:f9:9b:65:b9:d0:c5:69:36:9d:bf:80:03:4f:d3:d9:24:
df:10:4a:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 06:36:31 2025 by rpki-client